Make admin module inaccessible on internet

More
2 years 7 months ago #147127 by YPA6526
Hi,

We want to implement an application for carrying out survey. For this we evaluated some survey tools. Limesurvey is one the tool that we are evaluating.

We want that admin functionalities i.e. the admin URL should not be accessible on internet. Only the URLs for Surveys that have been created should be accessible on internet.

In other words, the admin URLs should be accessible only to few members in intranet but not to public users, where as the survey URLs should be accessible on intranet and internet.

Can you please let us know how this could be done?

Best Regards,
Yuvraj

Please Log in or Create an account to join the conversation.

LimeSurvey Partners
More
2 years 7 months ago #147139 by LouisGac
There is probably other way to do it, but if the goal is to be 100% sure that no admin functionalities are reachable via Internet, here what I'd do:

Two installations of limeSurvey can use the same database. So I'd use a normal version of LimeSurvey for the Intranet (it will have a normal admin). Then, for Internet, I'd have a second installation where the folder /application/admin would have been removed. So this installation would have not any admin interface at all.

Please Log in or Create an account to join the conversation.

More
2 years 7 months ago #147144 by YPA6526
I have seen that the URL that is sent in the email notification for filling/submitting the survey will domain name that the admin user used to access and sent invitation.

So if I logged in to the survey tool admin module using localhost and then invite someone then the invitation mail will have URL like http://localhost/limesurvey/index.php/survey...

If I logged in to survey tool admin module using domain name (example.com) and then invite someone then the invitaiton amil will have URL like example.com/limesurvey/index.php/survey ...

If we have 2installation pointing to same database and one of the installation's admin module is deleted and we use the installation that is having admin module, now from that installation we have to invite users for survey, ultimately the initiation mails will have the domain name of the installation which is having admin module.

I think the solution to have 2 installations can help me if we have a feature to specify what should be domain name of survey in invitation mail. But my understanding is this feature is not available as of now. Can you please let me know if I can change the domain name in invitation mails without changing any of the php code.

Please Log in or Create an account to join the conversation.

More
2 years 7 months ago #147145 by LouisGac

YPA6526 wrote: I think the solution to have 2 installations can help me if we have a feature to specify what should be domain name of survey in invitation mail. But my understanding is this feature is not available as of now. Can you please let me know if I can change the domain name in invitation mails without changing any of the php code.


Well that can be done via a plugin, but it implies some PHP coding (you can also hire a LimeSurvey partner)

Please Log in or Create an account to join the conversation.

More
2 years 7 months ago #147192 by DenisChenu
About surveyurl : use publicurl in config.php work out of the box : manual.limesurvey.org/Optional_settings#Advanced_Path_Settings

And to disable admin access : i already done it with one installation and htaccess on apache with mod_rewrite, alterantive : a quick plugin using (maybe) beforeLogin event github.com/LimeSurvey/LimeSurvey/blob/ma...hentication.php#L108

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand .
An error happen ? Before make a new topic : remind the Debug mode .
The following user(s) said Thank You: LouisGac

Please Log in or Create an account to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now
Join our Newsletter!